How we can help
Assessment and documentation
We identify the data you collect, its purpose and who accesses it. Customer and employee notices, processing records and supplier agreements are reviewed, prioritising issues requiring practical action.
Websites, tools and suppliers
We review forms, communications, policies and consent configuration within the agreed scope. Processors, retention and international transfers are assessed with the technical teams responsible for the tools.
Risk and responsibilities
We assess measures and procedures appropriate to your activity, the need for impact assessments and, where applicable, a data protection officer. The plan identifies actions, responsibilities and outstanding reviews.
Rights requests and incidents
We support rights requests, complaints and personal data incidents. For a breach, we review the facts and risk to determine appropriate records, notifications or communications alongside response measures.
Frequently asked questions
Do policies guarantee compliance?+
No. Documents must reflect actual operations and implemented measures. We define necessary changes and who needs to carry them out.
Must every incident be reported to the AEPD?+
Not automatically. It is necessary to establish whether personal data is affected and assess the risk to individuals. Notification requirements and timing are assessed from awareness of the breach.
